On the representation of bent functions 
by bent rectangles* 



Sergey Agievich 

National Research Center for Applied Problems of Mathematics and Informatics 

Belarusian State University 
Fr. Skorina av. 4, 220050 Minsk, Belarus 
agievich@bsu.by 



Abstract 

We propose a representation of boolean bent functions by bent rectangles, that is, 
by special matrices with restrictions on rows and columns. Using this representation, 
we exhibit new classes of bent functions, give an algorithm to construct bent functions, 
improve a lower bound for the number of bent functions. 

1 Preliminaries 

Let V n be an n-dimensional vector space over the field F 2 = {0, 1} and 5F n be the set of all 
Boolean functions V n — > F 2 . We identify a function / G 3 ! n of x — (xi, . . . ,x n ) with its 
algebraic normal form, that is, a polynomial of the ring F 2 [xi, . . . ,x n ] reduced modulo the 
ideal (x\ — xi, . . . , x\ — x n ). Denote by deg / the degree of such polynomial. 

o 

Write 7 = (— l) 7 for 7 G F 2 . The Walsh-Hadamard transform of / is defined as 

/(A)=^/(x)(-l)< A '*>, A G V n , 
xev„ 

where (A, x) = X\Xi + . . . + X n x n . The symbol + denotes both the addition in F 2 and the 
addition of integers or real numbers. The way of the symbol usage depends on operands. 

A 

A function / e 3 r 2n is called a bent function if | / (A)| = 2 n for any A G V^. Let B 2n be 
the set of all bent functions of 2n variables. 

The Sylvester-Hadamard matrix H n of order 2 n is defined by the recursive rule 

Hr, = I ' I ® H n _ 1: H = (1) , 
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where <g> denotes the Kronecker product. Note that H n is symmetric and H n H n = 2 n E, 
where E is the identity 2 n x 2™ matrix. 

Let A n — {I G 3 n ' deg/ < 1} denote the set of affine functions. A function I G A n is of 
the form 

l(x) = aiXx + . . . + a n x n + 7 = (a, x) + 7, «eV„, 7 G F 2 , 
and is a linear function if 7 = 0. 

Let v 1 = 0, f 2 , • • • ) ^2" 

be the lexicographically ordered vectors of V n . The sequence and 
the spectral sequence of / are defined, respectively, as the row vectors 

f =(f(v 1 ),...J(v 2n )) and f =(/(«!),..., /(t*.)). 

It is known that the ith row of is a sequence of the linear function (a,x), where a = Vi 
(a is the ith vector of V n ) and the Walsh-Hadamard transform can be written as 

A O 

f =fif„. 

Therefore, 

(i) ExevJ'W = 2 2n (Parseval's identity); 

(ii) if I G A n , l(x) = (a, x) + 7, then / (a) = 7 • 2 n and Z (A) = 0, A ^ a. 

A A A A 

Lemma 1. Let f\, f 2 , ^3, ^4 G 5F n . The vector |(f x + f 2 + f 3 + f 4) is a spectral sequence of 
some function g G 5F n i/ and i/ 

/1^)+/2(X)+/ 3 (X)+/ 4 (X) = 1 

/or a// x G V n . Moreover, 

g(x) = fi{x)f 2 {x) + h{x)h{x) + f 2 (x)f 3 (x). 
Proof Ifg =I(f 1 + f 2 + f 3 + f 4 ),theng = ±(f 1 + f 2 + f 3 + f 4 ) or 
°g (x) = ±(fi(x) +f2(x) +fs(x) +f4(x)), x G V n . 

But f i(x) + °f 2 (x) +f 3 (x) +f 4 (x) = ±2 if and only if 

fi(x) + f 2 (x) + f 3 (x) + Ux) = 1. 

Let g be the function defined in the statement of the lemma. For all x, among fi(x), 
fi{ x )i h{ x ) there are two identical values. Without loss of generality we can assume that 
fi( x ) = /2(a). Then g(x) = f\(x), f 4 (x) =f 3 (x) + l, and 

l(fi(x)+} 2 (x)+f 3 (x) + f 4 (x)) = l -{f 1 (x)+f xOr) + / 3 (x) - / 3 (x)) 

o o 

= fi(x) =g(x). 

Thusg = I(f 1 + f 2 + f 3 + f 4 ) andg = \{i l + f 2 + f 3 + f 4 ). □ 



Further we will use functions from the set 

A 

Q n = {qe3 : n : w(q) = 4}, 

A A 

where w(g) is the number of nonzero values of q . The following lemma completely charac- 
terizes the elements of Q n . 

A 

Lemma 2. Let q G Q n be such that q (A) 7^ only if 

A G {A(i), A( 2 ), A( 3 ), A( 4 )} C V n , n> 2. 

AO O 

Then J7 \i) = an d Q = 7i'2 n-1 for some G F 2 such that ^7 7» = 1 or Yli 7 « = ~~ 1; 
i = 1,2, 3, 4. Moreover, 

q(x) = h{x)l 2 {x) + /!(x)/ 3 (x) + Z 2 (^)^(^), 
where U{x) = (X^,x) + 7*. 

Proof. By induction on n it is easy to show that the equation J7 z| = 2 2 " has an unique 
solution Zi = 2 n_1 in positive integers (here and throughout the proof, i varies from 1 up to 
4). According to the Parseval identity 



A A A A A 



and q (X(i)) = 7 % ■ 2 n 1 for some 7» G F 2 . But it yields q = |(1 1 + I2 + I3 + I4), where 
k(x) = (A(i),x) + 7j. The application of Lemma [U completes the proof. □ 

2 Bent rectangles 

A 2 m x 2 fc matrix with rows am and transposed columns is called an (m, A;) freni rectangle 

□ 

if each of the vectors and 2 m ~ n a^ is a spectral sequence. Let S m ^ be the set of all 
(m, fc) bent rectangles. 

Theorem 1. For all positive integers m, k and n, m + k = In, there exists a bisection 
□ 

Proof. Consider a function / G 23 2ri with the sequence 

f =(f(i),...,f(M)), f (l) G{-l,l} x , M = 2"\ iT = 2 fc . 
Let A be the M x K matrix with rows 

O A 

a (i) — f (i)-Hfc = f (i)- (1) 
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Assuming H m = (hij), we obtain 



h n H k 



f H 2 ri = f \H m (g) Hk 



hMxHk . . HmmHu / 
= {h\xa(\) + . . . + hM\Q-{M), ■ ■ ■ , hiMd(i) + • • • + hMMa>(M)) € {±2 n } 2 . 

Hence a^# m G {±2 n } M , where is the row vector that consists of jth cooordinates of the 

or the jth transposed column of A. Therefore there exists a function 



vectors a^, . . . , O(m) 

o 

g G J m such that a^H m = 2 n g or 

2 m-n a U) = 2 -n a (j) HmHm = g Hm = g . 
□ 

By the matrix A is an element of 'B m ,k- Thus, we construct the map 



(2) 



m,k ■ 



23 



2ra 



□ 

23 



m,k i 



f 



\ f (M)Hk ) 



It is easy to show that such map is bijective. 



□ 



Further we will denote by / the image of / € 23 2n under the action of the map t K m ,k 

□ 

constructed in the proof. By construction, an ith row of / is a spectral sequence of the 
function 

f(i) (•Kjn+1 5 • • • 5 •^2n) f\P^l > ■ ■ ■ j ^rai j • ■ ■ j •^2n) 

of variables, where a = (a±, . . . , a m ) is the ith vector of V m . 

The obtained representation of bent functions by bent rectangles provides a general way 
to receive many known results. Consider, for example, the following construction due to 
Rothaus (see |H Class II]). 

Example 1. Let f x , f 2 , / 3 , f± G S 2n and 

/* (y, a) = /i(z)/ 2 (z) + /i(x)/ 3 (x) + f 2 (x)f 3 (x) 

+ y(h(x) + f 2 {x)) + z(fx(x) + f 3 (x)) + yz, x G V 2n , y,ze F 2 . 

//" /i(^) + /2(a) + /3(a) + /4O) = for all x, then f* G B 2 n+2- 

□ 

Indeed, extend CK 2>2 „ to 5F 2n+2 and set f * = Jl 22n (f*). By Lemma{J[ 



□ 



/A A A A \ 

/ f 1+ f 2+ f 3 -f 4 \ 
A A A A 

f 1 -f 2 + f 3 +f 4 
A A A A 

f 1+ f 2 -f 3 +f 4 
A A A A 

y fl-f 2 -f 3 -f 4 J 
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□ 

and the transposed columns of f * have the form 

~ (h(A) J 2 (A) J 3 (A),-/ 4 (A)) H 2 , A G V 2n . 

A 

But | / j(A) | = 2 n and, multiplying such columns by 2 1 ~ n , we get spectral sequences. Therefore 
□ □ 

/* G S 2 ,2n and /* G S 2 „ +2 . 

Note that in QjJ |3] the 2 m x 2 k matrices whose rows and columns are sequences of bent 

functions were considered. The multiplication by 2 k l 2 reduces such matrices to the elements 
□ 

of 23 TO> fc. 



3 Bent squares 



□ 

' n. a • 



We call / G 23 nn a 6ent square and write 23 n instead of S 

□ □ □ 

Suppose that the ith row (column) of / is indexed by the ith vector of V n . If / G 23 n and 

□ □ 
J, ^ are subsets of V n , then / [J | 3] is the submatrix of / determined by the rows indexed 

□ 

by 3 and columns indexed by d', the submatrix / (J | 3) is obtained by removing such rows 
and columns. 

Let S If^ be the set of all bent squares whose lines (rows and columns) are spectral 

° ° (A) 

sequences of affine functions of n variables. A bent square / G 23 „ have exactly one 
nonzero element ±2 n in each line and the corresponding bent function / has the form 

/(xi, . . . , x 2n ) = (fi(xi, . . . , x n )x n+1 + . . . + cp n {xi, x n )x 2n + ip(xi, ...,x n ), (3) 

where ipx, . . . , <p n , if) G and the vector function if = (</? 1; . . . , ip n ) determines a bijection 
on V n . Indeed, for such / 



otherwise. 



Functions of the form (J2J) constitute a well-known Maiorana-McFarland class of bent 
functions [2J. Obviously, 

\'B i 2 ^\ = \^^\=2 2n -(2 n )\. 

Now consider the set of bent squares 23 { n AQ) whose rows and, consequently, columns are 
spectral sequences of functions from A n U Q n . Let / G 23 If®' and let J/ (respectively 3f) be 
the set of indices of rows (respectively, columns) that are spectral sequences of the elements 
of Q n . It is clear that \3f\ = \3f\- For fixed d = 0, 1, . . . , 2 n , we define 

2^ = {/ gS^ 1 : P/l = 4 
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and let = ft-J^B { n AQ ' d) ). It is easy to see that B ^ Q ' d) = for d = 1, 2, 3, 5, d < 2 n . 

We suggest a way to construct the function /* £ S 2 ^ LQ,4 ' ) by using / £ B 2 „ , n > 2. 
Suppose that / is written in the form (jSJ) so that for some distinct azuj £ V n it holds that 

Qt(i) = /%) = 0, /% = (f(a {i) ), % = 1, 2, 3, 4. 

i i 

Next 

(i) choose arbitrary 7y , 7 2j -, 7 3j - £ F 2 , define 7 4j - = 7ij + 72j + 73j + 1, j = 1, 2 , 3, and set 
7i4 = 7a + 7i2 + 7i3 + 1, i = 1, 2, 3, 4; 

(ii) denote = (x l: . . . , x n ), x (2) = (x„+i, . . . , x 2n ), and for u £ V n put 

n 

= Y\i X i +Vi + l) = 



t=l 



1, X(i) = V, 

otherwise; 



(iii) for i = 1, 2, 3, 4 define polynomials 

Qi(x(2)) = f(0C(i), S( 2 )) + iil(aT(2))it2(jC(2)) + iil(^(2))i«(«(2)) + fej (X(2) ) Z« (#(2) ) , 

where kj(x(2)) = (/%),£(2)) + 7*j- 
Now define /* by 

4 

/*(xi,...,x 2n ) = /*(x ( i),x (2 )) = f(x {1) , x {2 )) + Y[l a{l) (x {1) )qi(x {2 ))- (4) 

1=1 

By the construction /* £ 'B 2 J ^ ,A \ Indeed, 

r [{««}!{/%)}] =7y2 n " 1 

and 

□ □ 

= /0J/*|#/*)> V = {"(i) ; «(2),a(3),a(4)}, 3/* = {Pq.),P(2),P(3),P<$}- 

Example 2. Consider the bent function 

/(:ci, x 2 , x 3 , :c 4 , x 5 , x 6 ) = Xi2 2 x 3 + a;ix 2 + xi£ 4 + x 2 x 6 + x 3 x 5 

that can be represented as © with <p(xx, x 2 , x 3 ) = (xi, 23, x^), ip(xx, x 2 , 23) = £1X2X3 + X\x 2 - 
Take 

a {1) = (0, 0, 0), a {2) = (0, 0, 1), a {3) = (1, 0, 0), a (4) = (1, 0, 1) 
and define the vectors 

/? (1) = (0,0,0), /3 (2) = (0,1,0), /3 (3) = (1,0,0), %) = (!, 1,0). 
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Set 



7n — 712 = 713 = 721 = 722 = 731 = 733 = 0, 
723 = 732 = 1- 

Now by (@D 

f*(xi, X 2 , X 3 , X 4 , X 5 , X 6 ) = XiX 2 X 3 + X 2 X 4 X 5 + X l X 2 + XiX 4 + x 2 x 6 + X3X5 + X A X 5 



and the bent squares f , f* have respectively the forms 



( 
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8 





o\ 








8 7 



/ 4 
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4 

-4 


V 
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4 
4 


-4 
4 








8 







4 
-4 


4 
4 














-4 
4 


4 
4 





o\ 








8 7 



In the above construction we make the transition from / 6 H>^ to /* G B^^' 4 ^ based 
on the structure of the corresponding bent squares. The following algorithm is intended for 
direct generation of bent squares f £ H> ^® ,2d > ; 2 < d < 2 n_1 , with subsequent determination 
of corresponding bent functions. 

The algorithm consists of the following steps: 

1. Choose sets {Ji, . . . , J^} and {di, ■ ■ ■ , Sd} whose elements are disjoint 2-element subsets 
of V n such that 

5>=... = 5> £/j=... = j> 

a&i a& d /3e3i /3€3 d 

Let J = Ji U . . . U J d , a = 0i U . . . U 3d- 

2. Choose a 0-1 matrix T = (ty) of order d with exactly 2 ones in each line. For i,j = 
1, . . . , d, put 



/ Pi I a. 



in— 1 



if U 



if t- 



1- 
0. 



±1 ±1 

'0 0' 

where the signs are placed so that the product of nonzero elements in each line of the 
□ 

matrix 2 1_n / [J | d] is equal to —1. 
□ 

3. Choose a matrix / (J | $) so that in each its line there is exactly one nonzero ele- 
ment ±2 n . 
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4. Put / [{a} | {f3}} = if a G J, /3 £ a or a £ J, /3 G 0. 

□ 

By Lemma |21 the rows of / indexed by 3f = J and the columns indexed by 3f = d are 
spectral sequences of elements of Q n . The remaining lines are spectral sequences of affine 
functions, |J| = \3\ = 2d, and / G 

Theorem 2. T/ie above algorithm allows to construct 

yn—l\ I \ 2 



2" -2d 



distinct bent squares of the set H> [f Q,2d ^ f or d = 2, . . . , 2 n ~ l . Here 

5 n (d) = (d/2)\ • 2 M / 2 • (^ Sn {d)r n {d) - ^r 2 n (d) 

if d is even and otherwise, and 

sJd) = (2 n - 1) • J/0/ \ ^— - - , r n (d) = (2 n - l)(2 n - 1 - 1) ,. 

™v ; v ) 2 rf/2(2»-i -d)!(d/2)!' v; v A W 2 

Theorem |21 gives a lower bound for | 3 (j^' 2d ) | which is exact for d — 2,3. Using the 
theorem, we obtain 

o o 8 o 

|3 8 | = |S 4 | > + |Bf Q,2<i) | > 1559994535674013286400 » 2 m4 . 

d=2 

This is the best lower bound for |CB»| known to the author. 



4 Classification of 33 
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In [3] Rothaus exhibits 4 classes on such that elements of a same class can be obtained 

from each other by linear invertible transformations of variables and addition of affine terms. 

We give an alternative classification of B 6 : Two functions are equivalent if the appropriate 

bent squares can be obtained one from the other by changing signs of elements and permuting 

rows and columns. The representatives of each of the 8 found equivalence classes are listed 

□ 

below as pairs "bent square / — bent function f(x\, . . . , xq) v . 
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Class 1 (B^, contains 2 15 • 3 2 • 5 • 7 elements): 



/ 8 



V 
























8 











8 











8 











8 














o\ 










X1X4 + x 2 x 5 + x 3 x 6 . 
Class 2 (3^ Q ' 4) , contains 2 18 • 3 • 7 2 elements): 



f-A 
4 
4 
4 




V 



4 
-4 
4 
4 







4 
4 
-4 
4 







4 
4 
4 
-4 











8 











8 











8 




o\ 








8 J 



XiX 5 Xq + X1X4 + X1X5 + X t XQ + x 2 x 5 + x 3 x 6 + x 5 x 6 + x 5 + x 6 . 
Class 3 (S^' 6 ^ contains 2 21 • 3 • 7 2 elements): 



f-A 


4 


4 


4 











o\ 


4 


-4 


4 


4 




















-4 


4 


4 


4 














4 


-4 


4 


4 








4 


4 








-4 


4 








4 


4 








4 


-4 
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V 




















V 



xix 2 xq + xix 4 a; 6 + xix^xs + x 2 a;4a; 6 + X1X5 + x 2 x 4 + x 2 x 5 + x 3 x e + x 5 x 6 + x 5 + x 6 . 
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Class 4 (S^ ,7J , contains 2 25 • 3 • 7 elements): 

/-4 4 4 4 (A 
4 -4 004400 
40-4 04040 
400 -4 0440 
044004 -4 
0404 -4 040 
00444 -4 00 

v 0000000 8 y 



X1X2X4 + X1X3X4 + X1X3XQ + X1X4X5 + X1X4XQ + X1X5XQ+ 

+ X2X3X4 + X2X3X5 + X 2 X 3 Xq + X2X4X5 + X 2 X 5 X e + X3X4XQ + x 3 x 5 x e + 

+ + X 2 X 4 + X 2 X 5 + X 2 Xq + X3X4 + + X 3 Xq + X 5 Xq + X 5 + Xq. 

Class 5 (a subset of Sg 4 ^' 8 ^, contains 2 19 • 7 2 elements): 



4 


4 


4 


4 











o\ 


4 


-4 


4 


4 














4 


4 


-4 


4 














4 


4 


4 


-4 


























-4 


4 


4 


4 














4 


-4 


4 


4 














4 


4 


-4 


4 














4 


4 


4 


-v 



X1X4 + X 2 X 5 + X 3 X 6 + X 5 Xq + X 5 + Xq. 

Class 6 (a subset of <B ( 6 AQ ' 8 \ contains 2 20 • 3 2 • 7 2 elements): 



/-4 


4 


4 


4 











o\ 


4 


-4 


4 


4 




















-4 


4 


4 


4 














4 


-4 


4 


4 




















-4 


4 


4 


4 














4 


-4 


4 


4 


4 


4 














-4 


4 


V 4 


4 














4 


-v 



£2X4X6 + X1X4 + X2X4 + X2X5 + x 3 x 6 + x 5 x 6 + X5 + x 6 . 
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Class 7 (a subset of Bg^' J , contains 2 23 ■ 3 ■ 7 2 elements): 



/-4 


4 


4 


4 











o\ 


4 


-4 








4 


4 








4 





-4 





4 





4 





4 








-4 





4 


4 








4 


4 





-4 








4 





4 





4 





-4 





4 








4 


4 








-4 


4 


1 











4 


4 


4 


-v 



X1X2X4 + X1X2X5 + X1X2X6 + £1X3X4 + X1X3X5 + X1X3X6 + X1X4X5+ 

+ XiX 4 X 6 + X2X3X4 + X2X3X5 + X 2 X 3 X 6 + X2X4X5 + X 2 X 5 X 6 + X 3 X 4 X 6 + X 3 X 5 X 6 + 

+ X 2 X 4 + X 2 X 6 + X 2 X 5 + X3X4 + X3X5 + X 3 X 6 + X 5 X 6 + X 5 + Xq. 

Class 8 ( contains 2 23 • 3 2 • 5 • 7 elements): 



1- 


-6 


2 


2 


2 


2 


2 


2 


2\ 




2 


-6 


2 


2 


2 


2 


2 


2 




2 


2 


-6 


2 


2 


2 


2 


2 




2 


2 


2 


-6 


2 


2 


2 


2 




2 


2 


2 


2 


-6 


2 


2 


2 




2 


2 


2 


2 


2 


-6 


2 


2 




2 


2 


2 


2 


2 


2 


-6 


2 




2 


2 


2 


2 


2 


2 


2 


"6/ 



X4X5X6 + X1X4 + X2X5 + X3X6 + X4X5 + X4X6 + X5X6 + X4 + X5 + Xq. 



5 Proof of Theorem [21 

Consider a 0-1 matrix A without zero lines. Denote by 00(A) a set of matrices obtained by 
all arrangements of signs in A such that the product of nonzero elements in each line is equal 
to -1. 

Let T denote the set of all 0-1 matrices containing exactly 2 ones in each line and let 
T* be the set of all such matrices without proper submatrices with the same property. For 
§CT, define the set 

n(S) = |J u It® 

and its exponential generating function 



* n( s)(*) = X; infi- 





ll 



Here is a set of all d x d matrices contained in S. 

Lemma 3. Let A be a 0-1 matrix of order d with m ones. If there exists a matrix B e 
such that A> B, then 

\oj(A)\ =2 m ~ 2d+l . 

Proof. Without loss of generality we can assume that 

/ 1 1 ... \ 

1 1 ... 

1 1 ... 

B 



\ 


















1 





Indeed, by a permutation of rows and columns we can reduce any matrix of to this form 
although such permutations do not change the number |u;(A)|. 

Form a matrix C by assigning appropriate signs to the elements of the 0-1 matrix C = 
A — B. Let fi, Sj be the products, respectively, of nonzero elements of the ith row and the 
jth column of C (we suppose that such products are equal to 1 for zero lines). The matrix 
C contains m — 2d ones and signs can be assigned in 2 m ~ 2d ways. 

If the matrix B = (6^) is obtained by an arrangement of signs of ones in B such that 
A = B + C G then 



buhd = si, 611612 = ~n, 612622 = -82, 6 22 6 : 



2:; 



-r 2 , 



bdibdd 



-r d - 



(5) 



Any nonzero element of C enters once in each of the products YL%=i ^* anc ^ llj=i therefore 
II r~i n Sj = 1 and there exist two distinct matrices B that meet (jSJ). Hence there are exactly 
2 . 2 m ~ 2d distinct matrices A e uj(A), as claimed. □ 

Let us determine the numbers t(d) = \Q(7d)\, d > 2. Observe that any matrix of Q(T) 
by a permutation of rows and columns can be represented as the direct sum of matrices 
contained in Q(7*). Using the exponential generating functions theory [3J Chapter 3], we 
obtain 

^n(r)(x) = exp (* n{T .)(x)) - 1 

and 

*n(o)(x) 



t(d) 



L(d!) 



x 



(d!) 



exp (^ Q{T »)(x)) . 



It is known jo], that 



Besides, if 



A 



2d 



d>2. 
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and the matrix T G 7* is represented as the sum of the nonzero 0-1 matrices T\ and T 2 , then 
the matrix 



B = T X 



1 



+ T 2 



1 



1J \1 0, 

Moreover A > 5 and |a;(A)| = 2 Ad+1 by Lemma H Thus, 



G T; 



2d- 



n(T*) 



X 



£ 

d>2 



2d 



• 2 



4d+l 



(d!)= 



log(l — 16x) 1 — lQx 



and 



t(d) 



exp(— 16x)(l — 16x) 



-1 nid 



■I) 1 



L(d!)2 

Return to the analyzed algorithm. The output bent squares / G bI^®' 2 ^ 



are uniquely 



determined by 

(i) the choice of each of the sets {Ji, . . . , 3d} and {3i, ■ ■ ■ , 0d} in (2™ — 1) ( 2 , ) ways; 

□ 

(ii) the choice of the matrix / p | 3] in t(d) ways; 

(iii) the choice of the matrix / (3 \ 3) in 2 2 "- 2d ■ (2 n - 2d)\ ways. 

For distinct input data the output bent squares are distinct except for, possibly, the case: 

□ 

d is even and the matrix / [3 \ 3] by a permutation of rows and columns can be represented 
as the direct sum of matrices from the set w(P), where 

/l 1 1 l\ 
1111 
1111 

V 1 1 1 V 

Let S n (d) be the number of possible sets of input data for this case and R n (d) be the number 
of distinct bent squares obtained from such sets. Then the algorithm allows us to construct 



(2 T 



m— 1 



d 



t(d) ■ 2 2 ~ M ■ (T - 2d)\ - S n (d) + R n (d) 



(6) 



distinct bent squares. It remains to obtain the numbers S n (d), R n (d). 

In the interesting case for some choice of the sets ^j, • • • , {3d-i, ^d}}, {{3i, #2}, • • • 
. . . , {3d-i, 3d}} and a permutation ir on {1, . . . , d/2}, it holds that 

/ [% t I = Pi, P t G cu(P), z = l,..., d/2, 



where % t = 3 2i -i U 3 2i , = 3n-\ U 32i- 
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Each of the sets {{Ji, J 2 }, . . . , {Jd-i, 3d}} and # 2 }, • • • , 3d}} can be chosen 

in s n (d) ways. Further, there are (d/2)\ ways to choose the permutation n and 2 9 ways to 
choose each of the matrices Pj. Thus 

5 n (d) = s 2 n (d) ■ (d/2)\ ■ 2 9d ' 2 ■ 2 2n ~ 2d ■ (2 n - 2d)!. (7) 

Let L(a,P) denote the 2-dimension linear subspace of V n , generated by vectors a and j3, 
and let 71, . . . , 7^/2 be the representatives of distinct classes V n /L(a, (3). The pair of the sets 
{a, P}, {71, . . . , 7^/2} can be chosen in r n (d) ways. 

If 

hi-i = li + {0,a}, l J 2 i=Ji + {P,a + f3} 

or 

hi-i = li + {0,/3}, J 2i = 7i + {«,« + /?} 

or 

?2i-i = li + {0,a + /?}, 32i = li + {a,P} 

for z = 1, . . . , d/2, then 

% % = ii + L(a,p). 

Thus only r„(d)/3 distinct sets . . . , 3Q/ 2 } correspond to r n (d) distinct sets {{Ji, J 2 }, . . . 
. . . , {3d-i,Jd}}- Similarly, r n (d)/3 distinct sets {£1, . . . , fid/2} correspond to r n (d) distinct 
sets {{#1, #2}, . . . , {dd-i, 3d}}- Therefore, 

Rn(d) = ((s n (d) - r n {d)f + 2K(d) - r n (d)f-^ + 

x (d/2)! ■ 2 M/2 ■ 2 2 "- M ■ (2 n - 2d)!. (8) 
Substituting (JJJ) and (JSJ) into (0), we obtain the desired result. 
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